Secureworks

Secureworks Taegis is a cloud-native XDR (Extended Detection and Response) platform that unifies security telemetry from endpoints, networks, cloud, and identity sources for advanced threat detection, investigation, and response. It leverages Secureworks' Counter Threat Unit (CTU) research and decades of managed security experience to deliver curated detections and response workflows.

For security response actions, Taegis provides native capabilities including host isolation, user lookup, asset vulnerability lookup, and network flow investigation enrichment. As the orchestration platform, Taegis coordinates response actions across all integrated security products, enabling security teams and MDR analysts to execute containment and investigation actions from a single console across the entire security ecosystem.

Supported Response Actions:

• Isolate Host
• Restore Host (unisolate)
• Lookup User
• Look Up Asset Vulnerabilities
• Enrich Investigation (Network Flow)